Red Hat Security Advisory: php security update

CVE-2024-2756 — php: host/secure cookie bypass due to partial CVE-2022-31629 fix CVE-2024-3096 — php: password_verify can erroneously return true, opening ATO risk CVE-2024-5458 — php: Filter bypass in filter_var (FILTER_VALIDATE_URL) CVE-2024-8925 — php: Erroneous parsing of multipart form data CVE-2024-8927 — php: cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8929 — php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-9026 — php: PHP-FPM Log Manipulation Vulnerability CVE-2024-11233 — php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11234 — php: Configuring a proxy in a stream context might allow for CRLF injection in URIs